Skip to content
OpenAdvisories

Vendor

comfyanonymous

5 known vulnerabilities.

Products

comfyanonymous/comfyui 3 comfyui 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-6092

    comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting

    A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /upload/image of the component Incomplete Fix CVE-2024-10099. The manipulation of the…

    comfyanonymous comfyui
  • Medium 6.5
    CVE-2024-10481

    Cross-Site Request Forgery (CSRF) in comfyanonymous/comfyui

    A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2. This vulnerability allows attackers to host malicious websites that, when visited by authenticated ComfyUI users, can perform arbitrary API requests on behalf of the user. This can b…

    comfyanonymous comfyanonymous/comfyui
  • Medium 6.1
    CVE-2024-10099

    Stored XSS in comfyanonymous/comfyui

    A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacker uploads an HTML file containing a malicious XSS payload via the `/api/upload/image` endpoint. The …

    comfyanonymous comfyanonymous/comfyui